Login Request a demo
QW
Product
Qwik
by Qwik · last CVE Mar 20, 2026
11
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 3High 2Medium 6Low 0
Severity
All severities11Critical3High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Qwik to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-2307
6.5
0%
Apr 26
Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0
Affected: before 0.104.0
CVE-2026-25148
6.1
0%
Feb 3
Qwik SSR XSS via Unsafe Virtual Node Serialization
Affected: before 1.19.0
CVE-2026-25149
6.1
0%
Feb 3
Qwik City Open Redirect via fixTrailingSlash
Affected: before 1.19.0
CVE-2024-41677
6.1
0%
Aug 6
Qwik is a performance focused javascript framework
Affected: before 1.7.3
CVE-2023-0410
6.1
0%
Jan 20
Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5
Affected: before 0.16.2
CVE-2026-25151
5.9
0%
Feb 3
Qwik City has a CSRF Protection Bypass via Content-Type Header Validation
Affected: before 1.19.0
Showing 6